Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: x8f8vdRzj80qJIlBqJtRLNVS6iIXh0B9/6KrcHwLLvI=
Subject key identifier: 00:47:50:C2:BE:1D:1A:72:F3:CA:4A:90:F5:26:D7:3E:3F:DD:D1:3F
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 01A00101AE6E2034D0D3E560945D6B4B1E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0CA1
Signing time: Fri 14 Aug 2026 16:01:22 +0000
Manifest this update: Fri 14 Aug 2026 16:01:22 +0000
Manifest next update: Sat 15 Aug 2026 16:01:22 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: /9BDdjBPMSNx05MrED68KVdAO+XfEKEqlSKn8Gqeo5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:ae:6e:20:34:d0:d3:e5:60:94:5d:6b:4b:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Aug 14 16:01:22 2026 GMT
Not After : Aug 15 16:01:22 2026 GMT
Subject: CN=004750c2be1d1a72f3ca4a90f526d73e3fddd13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7b:a1:d3:13:37:36:8b:37:5e:af:52:c4:67:
ab:73:b3:9d:04:a2:15:d1:29:56:3d:e9:02:fe:97:
1b:9d:10:11:69:f1:1b:5b:45:ed:d9:a2:78:46:aa:
66:a4:1f:3c:d3:54:58:ac:28:63:3b:fa:30:1f:6f:
fa:02:ca:77:0c:8f:48:f6:d1:d6:85:24:8c:d0:c9:
63:25:ef:25:80:18:12:db:cd:19:80:7d:31:76:67:
23:20:de:fd:b4:17:83:aa:d5:97:f8:28:73:ce:13:
e1:63:57:4d:54:92:05:c3:9b:26:58:c3:a2:9a:df:
0f:ca:5d:15:a6:a8:5f:d3:6a:a6:2d:67:7d:bf:7b:
0f:1c:58:56:81:7c:9e:a4:19:d2:23:4b:8c:00:5e:
1f:4e:ed:40:71:f7:9c:76:8a:31:96:48:b2:2b:89:
b0:13:0d:11:1a:7e:e7:2b:fb:b7:e1:de:5b:06:9d:
a3:83:b6:1f:1d:17:a2:f8:74:17:88:b5:02:99:2d:
78:db:82:19:0a:3b:a4:0a:c8:ff:d9:97:6e:e4:ec:
2e:ac:e4:8c:a2:6f:fc:d6:7f:aa:a0:9d:d7:1f:b8:
95:43:c4:52:a6:3f:b1:d9:03:6e:38:32:a4:3a:92:
1c:c1:6f:b1:85:44:d2:b1:a9:aa:57:db:39:23:26:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:50:C2:BE:1D:1A:72:F3:CA:4A:90:F5:26:D7:3E:3F:DD:D1:3F
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a9:c6:51:c0:23:be:9b:97:fc:41:2a:e4:f5:b1:88:78:9d:
93:6d:a2:6c:01:50:70:b8:4b:a5:2f:cc:76:90:33:b2:7c:e7:
25:15:1b:33:41:49:b2:73:15:4f:51:f6:fa:2e:47:e0:bd:48:
d3:51:82:64:99:c6:37:18:26:98:f3:ae:81:64:fd:64:10:93:
b5:89:3b:5d:98:23:3d:cf:96:1d:d2:59:b4:60:f6:26:3b:89:
be:ce:72:33:5c:3e:a1:96:f7:0d:6b:ab:c9:be:b1:f1:13:dc:
50:9f:25:96:84:36:e9:b6:7f:11:c0:87:ce:29:29:b2:6a:84:
c7:f5:39:b2:0b:31:88:ed:90:81:3e:4a:2e:c8:c4:fe:b6:d8:
be:57:fb:0f:de:68:bf:5e:51:1c:fc:c3:78:e1:90:b9:40:64:
17:2b:e3:c0:ca:ec:09:f4:b0:83:17:be:ce:b1:7d:82:88:8f:
87:29:82:df:93:ba:4a:a7:f6:6a:86:64:7c:cb:78:96:a4:74:
60:5f:a9:c3:a1:4a:fb:60:ff:ef:d2:fc:17:3d:9e:c4:8f:12:
80:79:65:d7:d6:5a:ad:5b:f5:e2:6c:f6:ed:91:a1:52:93:f7:
9e:c0:03:73:37:c0:2a:81:50:43:e3:d9:73:cf:1f:ab:74:f3:
af:a8:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:12 2026 by rpki-client